How do I change what my staff are allowed to do?

Everyone on your team is one record under Settings › User Accounts with exactly one role. The role sets a preset of permissions; the Permissions section of their record lets you flip a short list of them for that one person.

The four roles

	Admin	Front Desk	Groomer / Trainer	Clock In / Out
Who	Owner, manager	Reception	Service staff	Kiosk-only staff
Today	Yes	Yes	Yes	No web login
Calendar	Yes	Yes	Own column only, as "My Schedule"
Online booking, Booking Flow, Recurring, Waitlist	Yes	Yes	No
Clients and pets	Yes	Yes	Pet notes through their bookings
Money (invoices, payments, products)	Yes	Yes	No
Messages	Yes	Yes	No
Grow (automations, campaigns, reviews)	Yes	No	No
Insights (reports)	Yes	No, unless granted	No
Settings and Team	Yes	No	No
Time clock	PIN kiosk	Own clock	Own clock	PIN only

There is no separate manager role; managers are Admins.

Permissions you can change per person

Open the person and find Permissions. Items tagged Default come with the role; an Exception is something you granted this person beyond it, and an unticked default is something you took away. Eight can be changed:

• See prices and Change prices (the price matrix and service prices)
• Export clients
• Refund payments
• View reports
• Manage marketing (automations and campaigns)
• View the team
• Send messages

Everything else is fixed by the role. Admins hold every permission and show no toggles.

Hidden means closed

A page a role cannot see is also a page its data will not load on, and the same is true of the API behind the app. So a groomer who types the address of the Clients page gets a role notice, not the client list. Conversely, granting View reports to a front-desk person both shows the Insights item and lets the reports load.

Seeing it for yourself

Preview as on a person's record shows you Woof exactly as they see it, with a banner and a way back. Use it after changing a permission rather than guessing.

The two time-clock paths

Admins use the PIN kiosk: one shared device, and the four-digit PIN says who is punching. Everyone else clocks themselves in and out from their own login, no PIN needed. A Clock In / Out account has a PIN and nothing else.